Overview

overview

10

Static

static

10

JaffaCakes...cd.exe

windows7-x64

3

JaffaCakes...cd.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_36d1ab1243f503b4f1c18e0c36dc907a331ab74560012d05fb548454271ff2cd

  • Size

    960KB

  • MD5

    273e8f08e361aa441d66a9c910243bf6

  • SHA1

    015be5f7793a58c5c62d200e5e9181eda264f0db

  • SHA256

    36d1ab1243f503b4f1c18e0c36dc907a331ab74560012d05fb548454271ff2cd

  • SHA512

    8d5f3554691b3b0c7cd3fd19f3ad964cd4aadd52a43d00e3bc43137e253ed26f04698cbf445e3f19bccdfa02302fa62100604befbf70647d63414a3e5645787f

  • SSDEEP

    1536:AdMzAzjavO9uG+NNdQ4MGQRtLLc1glpgywBpL8LfACPT3:AazAzjaFG+NNyzc1gl7oLCL

Score
10/10
9b19cf60d9bdf65b8a2495aa965456c3raccoon

Malware Config

Extracted

Family

raccoon

Botnet

9b19cf60d9bdf65b8a2495aa965456c3

C2

http://5.2.70.65/

Attributes
  • user_agent

    TakeMyPainBack

xor.plain

Signatures

  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_36d1ab1243f503b4f1c18e0c36dc907a331ab74560012d05fb548454271ff2cd
    .exe windows:6 windows x86 arch:x86

    c5c36a515b13d54501168b24d2b48063


    Headers

    Imports

    Sections